diff options
Diffstat (limited to 'src/firejail/sandbox.c')
-rw-r--r-- | src/firejail/sandbox.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/firejail/sandbox.c b/src/firejail/sandbox.c index 0a32393a2..7489e7b6d 100644 --- a/src/firejail/sandbox.c +++ b/src/firejail/sandbox.c | |||
@@ -100,7 +100,7 @@ static void set_caps(void) { | |||
100 | else if (arg_caps_default_filter) | 100 | else if (arg_caps_default_filter) |
101 | caps_default_filter(); | 101 | caps_default_filter(); |
102 | 102 | ||
103 | // drop discretionary access control capabilities by default | 103 | // drop discretionary access control capabilities for root sandboxes |
104 | caps_drop_dac_override(); | 104 | caps_drop_dac_override(); |
105 | } | 105 | } |
106 | 106 | ||